Lucene search
K

32 matches found

RedhatCVE
RedhatCVE
added 2026/05/29 8:13 a.m.8 views

CVE-2026-32997

A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server...

8.6CVSS7.4AI score0.00052EPSS
Exploits0References1
NVD
NVD
added 2026/05/28 5:16 a.m.12 views

CVE-2026-32997

A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server...

8.6CVSS0.00052EPSS
Exploits0References1
CVE
CVE
added 2026/05/28 4:1 a.m.50 views

CVE-2026-32997

CVE-2026-32997 affects the Linux-based Veeam Software Appliance used by Veeam Backup & Replication. An authenticated user with the Backup Administrator role can write arbitrary files on the affected server. The issue is documented as high severity (CVSS 4.0 base 8.6) with network attack vector bu...

8.6CVSS7.4AI score0.00052EPSS
Exploits0References1
Circl
Circl
added 2026/05/27 2:35 p.m.6 views

CVE-2026-32997

creationtimestamp| type| source ---|---|--- 2026-05-27 14:35:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4ktlmj2b 2026-05-29 12:16:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116657815289026541...

8.6CVSS7.3AI score0.00052EPSS
Exploits0References2
Chainguard
Chainguard
added 2026/01/07 1:30 a.m.2 views

CVE-2025-32997 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines...

5.3CVSS7AI score0.00062EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/04 2:9 p.m.6 views

Security Bulletin: IBM Edge Data Collector uses http-proxy-middleware - 2.0.7 which is vulnerable to CVE-2025-32996, CVE-2025-32997.

Summary IBM Edge Data Collector uses http-proxy-middleware - 2.0.7 which is vulnerable to CVE-2025-32996, CVE-2025-32997. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2025-32996 DESCRIPTION: In http-proxy-middleware before 2.0.8 and 3.x before...

5.3CVSS6.7AI score0.00062EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/09/14 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-32997

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed. CVE-2025-32997 Note that Nessus relies on the...

5.3CVSS6.4AI score0.00062EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/04 7:13 a.m.12 views

Security Bulletin: IBM Maximo Application Suite uses multiple nodejs and go packages which is vulnerable to " CVE-2025-27152, CVE-2025-32996, CVE-2025-32997, CVE-2025-22871"

Summary IBM Maximo Application Suite uses " axios, http-proxy-middleware and net/http package " which is vulnerable to "CVE-2025-27152, CVE-2025-32996, CVE-2025-32997, CVE-2025-22871". This bulletin contains information regarding the vulnerability and how to address it. Vulnerability Details...

9.1CVSS6.7AI score0.00294EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/29 7:35 a.m.14 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to http-proxy-middleware-2.0.7.tgz CVE-2025-32997

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to http-proxy-middleware-2.0.7.tgz CVE-2025-32997. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-32997 DESCRIPTION: In http-proxy-middleware before 2.0.9 and 3....

5.3CVSS6.5AI score0.00062EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 3:51 a.m.6 views

CVE-2023-32997

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...

8.8CVSS6.8AI score0.00803EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:59 p.m.3 views

CVE-2022-32997

The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

9.8CVSS7.7AI score0.00734EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:19 p.m.3 views

CVE-2021-32997

The affected Baker Hughes Bentley Nevada products 3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01...

8.2CVSS6.7AI score0.00051EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/04/15 4:58 a.m.19 views

CVE-2025-32997

A flaw was found in http-proxy-middleware. The issue occurs because the fixRequestBody function proceeds even when bodyParser has failed, which could lead to unintended behavior. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Ha...

4CVSS4.1AI score0.00062EPSS
Exploits0References7
vulnersOsv
vulnersOsv
added 2025/04/15 3:30 a.m.4 views

@amazeelabs/publisher (>=2.4.28 <=3.2.6), @angular-devkit/build-angular (>=18.0.0 <=20.0.0-next.5) +83 more potentially affected by CVE-2025-32997 via http-proxy-middleware (>=3.0.0 <=3.0.3)

http-proxy-middleware NPM version =3.0.0, =2.4.28, =18.0.0, =1.0.0, =18.0.0-next.39, =18.0.0-next.39, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =2.1.0-next.0, =8.10.0, =9.0.0, =9.0.0, =9.0.0, =3.11.0-beta.6, =3.26.12-beta.0 and more Source cves: CVE-2025-32997 Source advisory:...

5.3CVSS5.8AI score0.00062EPSS
Exploits0
Cvelist
Cvelist
added 2025/04/15 12:0 a.m.11 views

CVE-2025-32997

In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed...

4CVSS0.00062EPSS
Exploits0References4
Circl
Circl
added 2025/01/23 4:2 p.m.0 views

CVE-2023-32997

creationtimestamp| type| source ---|---|--- 2025-01-23 16:02:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2746...

8.8CVSS8.1AI score0.00803EPSS
Exploits0References1
OSV
OSV
added 2024/05/14 3:37 p.m.2 views

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

4.7CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2024/05/14 3:37 p.m.13 views

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

8.4CVSS8.4AI score0.00034EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/11 10:4 a.m.23 views

CVE-2024-32997

Race condition vulnerability in the binder driver module Impact: Successful exploitation of this vulnerability will affect availability...

8.4CVSS6.9AI score0.00034EPSS
Exploits0References2
CVE
CVE
added 2024/05/11 10:4 a.m.48 views

CVE-2024-32997

CVE-2024-32997 describes a race-condition vulnerability in Huawei HarmonyOS’s binder driver module. Affected components include HarmonyOS and Huawei EMUI environments relying on the Binder driver. Impact is listed as availability loss upon successful exploitation. Connected documents corroborate ...

8.4CVSS6.8AI score0.00034EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder